@yimingliao/cms 0.0.53 → 0.0.54

package/dist/server/index.d.ts

@@ -879,6 +879,7 @@ interface ActionContext {
     repositories: {
         adminQueryRepository: ReturnType<typeof createAdminQueryRepository>;
         adminCommandRepository: ReturnType<typeof createAdminCommandRepository>;
+        adminRefreshTokenQueryRepository: ReturnType<typeof createAdminRefreshTokenQueryRepository>;
         adminRefreshTokenCommandRepository: ReturnType<typeof createAdminRefreshTokenCommandRepository>;
     };
     useCases: {
@@ -976,6 +977,146 @@ declare function createResetPasswordAction(ctx: ActionContext): ({ formData, }:
     formData: ResetPasswordFormData;
 }) => Promise<Result<void>>;
 
+declare const adminCreateValidator: (schemas: ReturnType<typeof createSchemas>) => zod.ZodObject<{
+    role: zod.ZodEnum<{
+        SUPER_ADMIN: "SUPER_ADMIN";
+        ADMIN: "ADMIN";
+        EDITOR: "EDITOR";
+    }>;
+    email: zod.ZodEmail;
+    password: zod.ZodString;
+    avatarImage: zod.ZodNullable<zod.ZodObject<{
+        id: zod.ZodString;
+    }, zod_v4_core.$strip>>;
+    socialLinks: zod.ZodPipe<zod.ZodArray<zod.ZodPipe<zod.ZodTransform<{} | null | undefined, unknown>, zod.ZodNullable<zod.ZodURL>>>, zod.ZodTransform<string[], (string | null)[]>>;
+    translations: zod.ZodPipe<zod.ZodArray<zod.ZodObject<{
+        locale: zod.ZodString;
+        name: zod.ZodNullable<zod.ZodString>;
+        authorName: zod.ZodNullable<zod.ZodString>;
+        description: zod.ZodNullable<zod.ZodString>;
+        jobTitle: zod.ZodNullable<zod.ZodString>;
+        url: zod.ZodNullable<zod.ZodPipe<zod.ZodTransform<{} | null | undefined, unknown>, zod.ZodNullable<zod.ZodURL>>>;
+        worksFor: zod.ZodNullable<zod.ZodString>;
+        knowsAbout: zod.ZodPipe<zod.ZodArray<zod.ZodString>, zod.ZodTransform<string[], string[]>>;
+        homeLocation: zod.ZodNullable<zod.ZodString>;
+        nationality: zod.ZodNullable<zod.ZodString>;
+    }, zod_v4_core.$strip>>, zod.ZodTransform<{
+        locale: string;
+        name: string | null;
+        authorName: string | null;
+        description: string | null;
+        jobTitle: string | null;
+        url: string | null;
+        worksFor: string | null;
+        knowsAbout: string[];
+        homeLocation: string | null;
+        nationality: string | null;
+    }[], {
+        locale: string;
+        name: string | null;
+        authorName: string | null;
+        description: string | null;
+        jobTitle: string | null;
+        url: string | null;
+        worksFor: string | null;
+        knowsAbout: string[];
+        homeLocation: string | null;
+        nationality: string | null;
+    }[]>>;
+}, zod_v4_core.$strip>;
+
+type AdminCreateFormData = zod__default.infer<ReturnType<typeof adminCreateValidator>>;
+declare function createAdminCreateAction(ctx: ActionContext): ({ formData, }: {
+    formData: AdminCreateFormData;
+}) => Promise<Result<{
+    admin: Admin;
+}>>;
+
+declare const adminUpdateValidator: (schemas: ReturnType<typeof createSchemas>, id: string) => zod.ZodObject<{
+    role: zod.ZodEnum<{
+        SUPER_ADMIN: "SUPER_ADMIN";
+        ADMIN: "ADMIN";
+        EDITOR: "EDITOR";
+    }>;
+    email: zod.ZodOptional<zod.ZodEmail>;
+    avatarImage: zod.ZodNullable<zod.ZodObject<{
+        id: zod.ZodString;
+    }, zod_v4_core.$strip>>;
+    socialLinks: zod.ZodPipe<zod.ZodArray<zod.ZodPipe<zod.ZodTransform<{} | null | undefined, unknown>, zod.ZodNullable<zod.ZodURL>>>, zod.ZodTransform<string[], (string | null)[]>>;
+    translations: zod.ZodPipe<zod.ZodArray<zod.ZodObject<{
+        locale: zod.ZodString;
+        name: zod.ZodNullable<zod.ZodString>;
+        authorName: zod.ZodNullable<zod.ZodString>;
+        description: zod.ZodNullable<zod.ZodString>;
+        jobTitle: zod.ZodNullable<zod.ZodString>;
+        url: zod.ZodNullable<zod.ZodPipe<zod.ZodTransform<{} | null | undefined, unknown>, zod.ZodNullable<zod.ZodURL>>>;
+        worksFor: zod.ZodNullable<zod.ZodString>;
+        knowsAbout: zod.ZodPipe<zod.ZodArray<zod.ZodString>, zod.ZodTransform<string[], string[]>>;
+        homeLocation: zod.ZodNullable<zod.ZodString>;
+        nationality: zod.ZodNullable<zod.ZodString>;
+    }, zod_v4_core.$strip>>, zod.ZodTransform<{
+        locale: string;
+        name: string | null;
+        authorName: string | null;
+        description: string | null;
+        jobTitle: string | null;
+        url: string | null;
+        worksFor: string | null;
+        knowsAbout: string[];
+        homeLocation: string | null;
+        nationality: string | null;
+    }[], {
+        locale: string;
+        name: string | null;
+        authorName: string | null;
+        description: string | null;
+        jobTitle: string | null;
+        url: string | null;
+        worksFor: string | null;
+        knowsAbout: string[];
+        homeLocation: string | null;
+        nationality: string | null;
+    }[]>>;
+}, zod_v4_core.$strip>;
+
+type AdminUpdateFormData = zod__default.infer<ReturnType<typeof adminUpdateValidator>>;
+declare function createAdminUpdateAction(ctx: ActionContext): ({ id, formData, }: {
+    id: string;
+    formData: AdminUpdateFormData;
+}) => Promise<Result<{
+    admin: Admin;
+}>>;
+
+declare function createAdminDeleteAction(ctx: ActionContext): ({ targetId }: {
+    targetId: string;
+}) => Promise<Result<void>>;
+
+declare function createAdminFindFullAction(ctx: ActionContext): (params: {
+    id?: string;
+    email?: string;
+}) => Promise<Result<{
+    admin: AdminFull;
+}>>;
+
+declare function createAdminFindListCardsAction(ctx: ActionContext): (params: {
+    searchString?: string;
+    adminIds?: string[];
+    page: number;
+    pageSize: number;
+}) => Promise<Result<{
+    items: AdminFull[];
+    total: number;
+}>>;
+
+declare function createAdminRefreshTokenDeleteAction(ctx: ActionContext): (tokenHash: string) => Promise<Result<void>>;
+
+declare function createAdminRefreshTokenFindManyAction(ctx: ActionContext): ({ adminId, }: {
+    adminId: string;
+}) => Promise<Result<{
+    adminRefreshTokens: AdminRefreshToken[];
+    currentToken: AdminRefreshToken;
+}>>;
+
 declare class ServerError extends Error {
     readonly i18nKey?: string;
     readonly statusCode?: number;
@@ -994,4 +1135,4 @@ declare class ServerError extends Error {
     static internalServerError(): ServerError;
 }
 
-export { ADMIN_ORDER_BY, type ActionContext, type ChangePasswordFormData, type EmailUnverifiedFormData, type ForgotPasswordFormData, ORDER_BY, POST_ORDER_BY, type RawCacheKey, type ResetPasswordFormData, ServerError, type SignInFormData, type VerifyEmailFormData, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthMiddleware, createAuthUseCases, createCache, createCacheResult, createChangePasswordAction, createCookieService, createCryptoService, createEmailUnverifiedAction, createEmailVerificationEmail, createExecuteAction, createExecuteApi, createExist, createFileCommandRepository, createFileQueryRepository, createFileSchema, createFolderCommandRepository, createFolderQueryRepository, createForgotPasswordAction, createForgotPasswordEmail, createIpRateLimiter, createJwtService, createMultiFileSchema, createPostCommandRepository, createPostQueryRepository, createRenderEmailTemplate, createResetPasswordAction, createSchemas, createSendEmail, createSeoMetadataCommandRepository, createSignInAction, createSignOutAction, createTocItemSchema, createTransporter, createUnique, createVerifyAccessToken, createVerifyAction, createVerifyEmailAction, createVerifyRefreshToken, createZod, normalizeCacheKey };
+export { ADMIN_ORDER_BY, type ActionContext, type AdminCreateFormData, type AdminUpdateFormData, type ChangePasswordFormData, type EmailUnverifiedFormData, type ForgotPasswordFormData, ORDER_BY, POST_ORDER_BY, type RawCacheKey, type ResetPasswordFormData, ServerError, type SignInFormData, type VerifyEmailFormData, createAdminCommandRepository, createAdminCreateAction, createAdminDeleteAction, createAdminFindFullAction, createAdminFindListCardsAction, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenDeleteAction, createAdminRefreshTokenFindManyAction, createAdminRefreshTokenQueryRepository, createAdminUpdateAction, createArgon2Service, createAuthMiddleware, createAuthUseCases, createCache, createCacheResult, createChangePasswordAction, createCookieService, createCryptoService, createEmailUnverifiedAction, createEmailVerificationEmail, createExecuteAction, createExecuteApi, createExist, createFileCommandRepository, createFileQueryRepository, createFileSchema, createFolderCommandRepository, createFolderQueryRepository, createForgotPasswordAction, createForgotPasswordEmail, createIpRateLimiter, createJwtService, createMultiFileSchema, createPostCommandRepository, createPostQueryRepository, createRenderEmailTemplate, createResetPasswordAction, createSchemas, createSendEmail, createSeoMetadataCommandRepository, createSignInAction, createSignOutAction, createTocItemSchema, createTransporter, createUnique, createVerifyAccessToken, createVerifyAction, createVerifyEmailAction, createVerifyRefreshToken, createZod, normalizeCacheKey };

package/dist/server/index.js

@@ -2310,6 +2310,321 @@ function createResetPasswordAction(ctx) {
   };
 }
 
+// src/server/interfaces/actions/resources/admin/commands/create/admin-create-validator.ts
+var adminCreateValidator = (schemas) => schemas.z.object({
+  // core
+  role: schemas.z.enum(Object.values(ADMIN_ROLES)),
+  email: schemas.email().unique({ table: "admins", column: "email" }),
+  password: schemas.password(),
+  // ----------------------------------------------------------------------------
+  // relations
+  // ----------------------------------------------------------------------------
+  // File
+  avatarImage: schemas.z.object({ id: schemas.id().exist({ table: "files" }) }).nullable(),
+  // better seo
+  socialLinks: schemas.array(schemas.url()),
+  // ----------------------------------------------------------------------------
+  // translation
+  // ----------------------------------------------------------------------------
+  translations: schemas.array(
+    schemas.z.object({
+      // core
+      locale: schemas.locale(),
+      // text
+      name: schemas.text().nullable(),
+      // better seo
+      authorName: schemas.text().nullable(),
+      description: schemas.text().nullable(),
+      jobTitle: schemas.text().nullable(),
+      url: schemas.url().nullable(),
+      worksFor: schemas.text().nullable(),
+      knowsAbout: schemas.array(schemas.text()),
+      homeLocation: schemas.text().nullable(),
+      nationality: schemas.text().nullable()
+    })
+  )
+});
+
+// src/server/interfaces/actions/resources/admin/commands/create/create-admin-create-action.ts
+function createAdminCreateAction(ctx) {
+  const {
+    services: { argon2Service },
+    repositories: { adminCommandRepository },
+    middlewares: { authMiddleware },
+    action: { executeAction },
+    emails: { emailVerificationEmail },
+    schemas
+  } = ctx;
+  return async function adminCreateAction({
+    formData
+  }) {
+    return executeAction(
+      async (translator) => {
+        await authMiddleware.authenticate();
+        const { password, ...rest } = await adminCreateValidator(schemas).parseAsync(formData);
+        const passwordHash = await argon2Service.hash(password);
+        const created = await adminCommandRepository.create({
+          ...rest,
+          passwordHash
+        });
+        void emailVerificationEmail.send({ translator, admin: created });
+        return {
+          i18nKey: "ok.admins-store-ok",
+          data: { admin: created }
+        };
+      },
+      { type: "command" }
+    );
+  };
+}
+
+// src/server/interfaces/actions/resources/admin/commands/update/admin-update-validator.ts
+var adminUpdateValidator = (schemas, id) => schemas.z.object({
+  // core
+  role: schemas.z.enum(Object.values(ADMIN_ROLES)),
+  email: schemas.email().unique({
+    table: "admins",
+    column: "email",
+    excludeSelf: { name: "id", value: id }
+  }).optional(),
+  // ----------------------------------------------------------------------------
+  // relations
+  // ----------------------------------------------------------------------------
+  // File
+  avatarImage: schemas.z.object({ id: schemas.id().exist({ table: "files" }) }).nullable(),
+  // better seo
+  socialLinks: schemas.array(schemas.url()),
+  // ----------------------------------------------------------------------------
+  // translation
+  // ----------------------------------------------------------------------------
+  translations: schemas.array(
+    schemas.z.object({
+      // core
+      locale: schemas.locale(),
+      // text
+      name: schemas.text().nullable(),
+      // better seo
+      authorName: schemas.text().nullable(),
+      description: schemas.text().nullable(),
+      jobTitle: schemas.text().nullable(),
+      url: schemas.url().nullable(),
+      worksFor: schemas.text().nullable(),
+      knowsAbout: schemas.array(schemas.text()),
+      homeLocation: schemas.text().nullable(),
+      nationality: schemas.text().nullable()
+    })
+  )
+});
+
+// src/server/interfaces/actions/resources/admin/commands/update/create-admin-update-action.ts
+function createAdminUpdateAction(ctx) {
+  const {
+    repositories: { adminQueryRepository, adminCommandRepository },
+    middlewares: { authMiddleware },
+    action: { executeAction },
+    emails: { emailVerificationEmail },
+    schemas
+  } = ctx;
+  return async function adminUpdateAction({
+    id,
+    formData
+  }) {
+    return executeAction(
+      async (translator) => {
+        const currentAdmin = await authMiddleware.authenticate();
+        const targetAdmin = await adminQueryRepository.findFull({ id });
+        if (!targetAdmin) throw ServerError.notFound();
+        const isSelf = currentAdmin.id === targetAdmin.id;
+        const canModifyOthers = currentAdmin.role === ADMIN_ROLES.SUPER_ADMIN;
+        if (!isSelf && !canModifyOthers) throw ServerError.forbidden();
+        const { email, ...validatedPayload } = await adminUpdateValidator(
+          schemas,
+          targetAdmin.id
+        ).parseAsync(formData);
+        const isUpdatingEmail = email !== targetAdmin.email;
+        if (isUpdatingEmail) {
+          void emailVerificationEmail.send({
+            translator,
+            admin: targetAdmin,
+            ...email ? { newEmail: email } : {}
+          });
+        }
+        const updatedAdmin = await adminCommandRepository.update({
+          id: targetAdmin.id,
+          ...validatedPayload,
+          ...email ? { email } : {},
+          emailVerifiedAt: !isUpdatingEmail ? targetAdmin.emailVerifiedAt : null
+          // Clear emailVerifiedAt if updating a new email
+        });
+        return {
+          i18nKey: !isUpdatingEmail ? "ok.update-ok" : "ok.admins-update-email-ok",
+          data: { admin: updatedAdmin }
+        };
+      },
+      { type: "command" }
+    );
+  };
+}
+
+// src/server/interfaces/actions/resources/admin/commands/delete/create-admin-delete-action.ts
+function createAdminDeleteAction(ctx) {
+  const {
+    repositories: { adminQueryRepository, adminCommandRepository },
+    middlewares: { authMiddleware },
+    action: { executeAction }
+  } = ctx;
+  return async function adminDeleteAction({ targetId }) {
+    return executeAction(
+      async () => {
+        await authMiddleware.authenticate();
+        const targetAdmin = await adminQueryRepository.findFull({
+          id: targetId
+        });
+        if (!targetAdmin) throw ServerError.notFound();
+        if (targetAdmin.role === ADMIN_ROLES.SUPER_ADMIN) {
+          throw new ServerError({ i18nKey: "error.admins-destroy-forbidden" });
+        }
+        await adminCommandRepository.delete({ id: targetId });
+        return {
+          i18nKey: "ok.destroy-ok"
+        };
+      },
+      { type: "command" }
+    );
+  };
+}
+
+// src/server/interfaces/actions/resources/admin/queries/create-admin-find-full-action.ts
+function createAdminFindFullAction(ctx) {
+  const {
+    repositories: { adminQueryRepository },
+    action: { executeAction }
+  } = ctx;
+  return async function adminFindFullAction(params) {
+    return executeAction(
+      async () => {
+        const admin = await adminQueryRepository.findFull(params);
+        if (!admin) throw ServerError.notFound();
+        return {
+          data: { admin }
+        };
+      },
+      {
+        type: "query",
+        key: ["admin", "findFullAction", params.id, params.email]
+      }
+    );
+  };
+}
+
+// src/server/interfaces/actions/resources/admin/queries/create-admin-find-list-cards-action.ts
+function createAdminFindListCardsAction(ctx) {
+  const {
+    repositories: { adminQueryRepository },
+    middlewares: { authMiddleware },
+    action: { executeAction }
+  } = ctx;
+  return async function adminFindFullAction(params) {
+    return executeAction(
+      async ({ locale }) => {
+        const { role } = await authMiddleware.authenticate();
+        const { items, total } = await adminQueryRepository.findListCards({
+          ...params,
+          locale,
+          role
+        });
+        return {
+          data: { items, total }
+        };
+      },
+      {
+        type: "query",
+        key: [
+          "admin",
+          "findListCardsAction",
+          params.searchString,
+          ...params.adminIds ?? [],
+          params.page,
+          params.pageSize
+        ]
+      }
+    );
+  };
+}
+
+// src/server/interfaces/actions/resources/admin-refresh-token/commands/delete/create-admin-refresh-token-delete-action.ts
+function createAdminRefreshTokenDeleteAction(ctx) {
+  const {
+    repositories: {
+      adminRefreshTokenQueryRepository,
+      adminRefreshTokenCommandRepository
+    },
+    middlewares: { authMiddleware },
+    action: { executeAction }
+  } = ctx;
+  return async function adminRefreshTokenDeleteAction(tokenHash) {
+    return executeAction(
+      async () => {
+        const currentAdmin = await authMiddleware.authenticate();
+        const targetAdminRefreshToken = await adminRefreshTokenQueryRepository.findByToken({
+          tokenHash
+        });
+        if (!targetAdminRefreshToken) throw ServerError.notFound();
+        const isSelf = currentAdmin.id === targetAdminRefreshToken.adminId;
+        const canModifyOthers = currentAdmin.role === ADMIN_ROLES.SUPER_ADMIN;
+        if (!isSelf && !canModifyOthers) throw ServerError.forbidden();
+        await adminRefreshTokenCommandRepository.delete({
+          id: targetAdminRefreshToken.id
+        });
+        return {
+          i18nKey: "ok.destroy-ok"
+        };
+      },
+      { type: "command" }
+    );
+  };
+}
+
+// src/server/interfaces/actions/resources/admin-refresh-token/queries/create-admin-refresh-token-find-full-action.ts
+function createAdminRefreshTokenFindManyAction(ctx) {
+  const {
+    services: { cryptoService, cookieService },
+    repositories: { adminRefreshTokenQueryRepository },
+    middlewares: { authMiddleware },
+    action: { executeAction },
+    config: { refreshTokenName }
+  } = ctx;
+  return async function adminRefreshTokenFindManyAction({
+    adminId
+  }) {
+    return executeAction(
+      async () => {
+        await authMiddleware.authenticate();
+        const token = await cookieService.getSignedCookie({
+          name: refreshTokenName
+        });
+        const currentToken = await adminRefreshTokenQueryRepository.findByToken(
+          { tokenHash: cryptoService.hash(token) }
+        );
+        if (!currentToken) throw ServerError.notFound();
+        const adminRefreshTokens = await adminRefreshTokenQueryRepository.findManyByAdminId({
+          adminId
+        });
+        return {
+          data: {
+            adminRefreshTokens,
+            currentToken
+          }
+        };
+      },
+      {
+        type: "query",
+        key: ["admin-refresh-token", "findManyAction", adminId]
+      }
+    );
+  };
+}
+
 // src/server/applications/auth/create-auth-use-cases.ts
 function createAuthUseCases({
   prisma,
@@ -2489,4 +2804,4 @@ function createForgotPasswordEmail({
   };
 }
 
-export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthMiddleware, createAuthUseCases, createCache, createCacheResult, createChangePasswordAction, createCookieService, createCryptoService, createEmailUnverifiedAction, createEmailVerificationEmail, createExecuteAction, createExecuteApi, createExist, createFileCommandRepository, createFileQueryRepository, createFileSchema, createFolderCommandRepository, createFolderQueryRepository, createForgotPasswordAction, createForgotPasswordEmail, createIpRateLimiter, createJwtService, createMultiFileSchema, createPostCommandRepository, createPostQueryRepository, createRenderEmailTemplate, createResetPasswordAction, createSchemas, createSendEmail, createSeoMetadataCommandRepository, createSignInAction, createSignOutAction, createTocItemSchema, createTransporter, createUnique, createVerifyAccessToken, createVerifyAction, createVerifyEmailAction, createVerifyRefreshToken, createZod, normalizeCacheKey };
+export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, ServerError, createAdminCommandRepository, createAdminCreateAction, createAdminDeleteAction, createAdminFindFullAction, createAdminFindListCardsAction, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenDeleteAction, createAdminRefreshTokenFindManyAction, createAdminRefreshTokenQueryRepository, createAdminUpdateAction, createArgon2Service, createAuthMiddleware, createAuthUseCases, createCache, createCacheResult, createChangePasswordAction, createCookieService, createCryptoService, createEmailUnverifiedAction, createEmailVerificationEmail, createExecuteAction, createExecuteApi, createExist, createFileCommandRepository, createFileQueryRepository, createFileSchema, createFolderCommandRepository, createFolderQueryRepository, createForgotPasswordAction, createForgotPasswordEmail, createIpRateLimiter, createJwtService, createMultiFileSchema, createPostCommandRepository, createPostQueryRepository, createRenderEmailTemplate, createResetPasswordAction, createSchemas, createSendEmail, createSeoMetadataCommandRepository, createSignInAction, createSignOutAction, createTocItemSchema, createTransporter, createUnique, createVerifyAccessToken, createVerifyAction, createVerifyEmailAction, createVerifyRefreshToken, createZod, normalizeCacheKey };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yimingliao/cms",
-  "version": "0.0.53",
+  "version": "0.0.54",
   "author": "Yiming Liao",
   "license": "MIT",
   "type": "module",